Skip to content

[Backport release-1.3] fix(talos): bump Talos to v1.12.7 (CVE-2026-31431) - #2547

Merged
Andrei Kvapil (kvaps) merged 1 commit into
release-1.3from
backport-2545-to-release-1.3
May 1, 2026
Merged

[Backport release-1.3] fix(talos): bump Talos to v1.12.7 (CVE-2026-31431)#2547
Andrei Kvapil (kvaps) merged 1 commit into
release-1.3from
backport-2545-to-release-1.3

Conversation

@github-actions

@github-actions github-actions Bot commented May 1, 2026

Copy link
Copy Markdown

Description

Backport of #2545 to release-1.3.

@kvaps @claude @github-actions
fix(talos): bump Talos to v1.12.7 (CVE-2026-31431)
d6b8eec 
Bumps Talos Linux from v1.12.6 to v1.12.7, which includes the kernel
fix for CVE-2026-31431 ("Copy Fail") — an unprivileged-to-root local
privilege escalation in the Linux kernel crypto subsystem (algif_aead).

Also refreshes the bundled system extension digests (amd-ucode, amdgpu,
bnx2-bnx2x, i915, intel-ice-firmware, qlogic-firmware, drbd, zfs) to
their 1.12.7-aligned builds.

Generated via `make update` in packages/core/talos.

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Andrei Kvapil <[email protected]>
(cherry picked from commit 8549f3b)
@github-actions github-actions Bot mentioned this pull request May 1, 2026
Merged
@dosubot dosubot Bot added size/XS This PR changes 0-9 lines, ignoring generated files area/platform Issues or PRs related to platform infrastructure (bundle, flux, talos, installer) area/release Issues or PRs related to release tooling (changelog, backport, release pipeline) kind/backport-previous Categorizes issue or PR as requiring a backport to the previous release line kind/bug Categorizes issue or PR as related to a bug security Security-related issues and features security/fixed Fix released labels May 1, 2026
@kvaps
Andrei Kvapil (kvaps) merged commit c4dca43 into release-1.3 May 1, 2026
6 of 7 checks passed
@kvaps
Andrei Kvapil (kvaps) deleted the backport-2545-to-release-1.3 branch May 1, 2026 10:56
@github-actions

github-actions Bot commented May 1, 2026

Copy link
Copy Markdown
Author

Backport failed for release-1.2, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-1.2
git worktree add -d .worktree/backport-2547-to-release-1.2 origin/release-1.2
cd .worktree/backport-2547-to-release-1.2
git switch --create backport-2547-to-release-1.2
git cherry-pick -x d6b8eecae93736b29d7dac14537bf76220ab287b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kvaps Andrei Kvapil (kvaps) Awaiting requested review from kvaps kvaps is a code owner
@lllamnyp Timofei Larkin (lllamnyp) Awaiting requested review from lllamnyp lllamnyp is a code owner
@lexfrei Aleksei Sviridkin (lexfrei) Awaiting requested review from lexfrei lexfrei is a code owner
@androndo Andrey Kolkov (androndo) Awaiting requested review from androndo androndo is a code owner
@IvanHunters IvanHunters Awaiting requested review from IvanHunters IvanHunters is a code owner
@sircthulhu Kirill Ilin (sircthulhu) Awaiting requested review from sircthulhu sircthulhu is a code owner
@myasnikovdaniil myasnikovdaniil Awaiting requested review from myasnikovdaniil myasnikovdaniil is a code owner

Assignees

No one assigned

Labels

area/platform Issues or PRs related to platform infrastructure (bundle, flux, talos, installer) area/release Issues or PRs related to release tooling (changelog, backport, release pipeline) kind/backport-previous Categorizes issue or PR as requiring a backport to the previous release line kind/bug Categorizes issue or PR as related to a bug security/fixed Fix released security Security-related issues and features size/XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kvaps